Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
File: PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft (raw, json)
Hash identifier: XlT67Wpibw1roWB/hzDmI25wOTt+j/eFonYBYF7AVRE=
Subject key identifier: 1E:8E:CF:EE:ED:B7:24:22:76:92:62:C8:AB:0C:02:48:CF:57:DE:7F
Authority key identifier: 3C:48:B9:2E:80:94:D7:78:02:17:E3:25:4C:59:72:0B:C2:A9:76:38
Certificate issuer: /CN=3c48b92e8094d7780217e3254c59720bc2a97638
Certificate serial: 01A0E0CF9B283A5A8BF03288DE719B0239DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
Manifest number: 038D
Signing time: Sun 27 Sep 2026 03:01:37 +0000
Manifest this update: Sun 27 Sep 2026 03:01:37 +0000
Manifest next update: Mon 28 Sep 2026 03:01:37 +0000
Files and hashes: 1: PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl (hash: WeCLDmbG+Y8qhWpd0YC2/YWCg7xs7RV8rM33VO0uAkY=)
2: Xu6LJ5NwOjulzYk7ThddVSSoUcw.roa (hash: lwbMkRX85sGp49MdbyhTOstP4KWwGOTsiskzrGm1TQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:9b:28:3a:5a:8b:f0:32:88:de:71:9b:02:39:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c48b92e8094d7780217e3254c59720bc2a97638
Validity
Not Before: Sep 27 03:01:37 2026 GMT
Not After : Sep 28 03:01:37 2026 GMT
Subject: CN=1e8ecfeeedb72422769262c8ab0c0248cf57de7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:99:ee:f8:88:2c:1c:d0:90:e1:5e:93:e3:14:
cb:da:71:32:8f:86:4f:6a:9c:7c:64:65:1d:40:57:
10:c8:6a:dc:79:0b:dc:55:69:e6:d4:9a:b8:ac:5c:
31:cf:d7:c9:c4:ea:1b:b4:38:58:ae:e2:c9:d2:5d:
de:d0:91:af:ac:63:80:08:63:16:92:32:80:ec:fd:
eb:f9:bf:4b:da:2f:76:d9:06:a3:5a:9b:f4:6f:02:
7a:8a:ea:35:c8:d6:ad:af:55:63:f2:13:63:30:a6:
f1:22:c9:16:cc:b4:0e:4e:ce:84:77:09:97:ee:cc:
96:87:9e:0c:9d:a7:59:dd:2b:59:23:78:6c:bb:fa:
f3:0d:5b:08:66:fc:f2:6c:ce:ec:95:0c:77:0a:24:
08:b7:4e:a7:b7:f5:be:2c:68:65:c3:d2:c8:5c:7e:
1f:d5:69:32:74:ae:21:c0:db:59:7e:6b:78:eb:f4:
e1:d8:af:63:a3:cd:71:c2:0d:d1:45:2f:75:17:9f:
8d:0c:62:dc:bf:24:a7:95:ec:82:0f:bd:94:0f:4a:
87:79:1c:20:2c:95:93:a7:de:c9:da:ee:eb:cb:ea:
e9:92:87:e0:01:d5:a8:98:7b:16:f1:f8:2e:77:65:
a6:fd:38:85:13:01:58:c0:b2:f3:0e:57:1d:2b:29:
f7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8E:CF:EE:ED:B7:24:22:76:92:62:C8:AB:0C:02:48:CF:57:DE:7F
X509v3 Authority Key Identifier:
keyid:3C:48:B9:2E:80:94:D7:78:02:17:E3:25:4C:59:72:0B:C2:A9:76:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:cf:8f:89:2d:fe:db:a0:b2:38:4a:c0:55:a8:e6:4d:83:74:
b4:92:73:e4:27:fd:9f:d6:8c:20:2c:57:c9:e6:66:c2:da:b7:
f9:80:b7:0a:a0:f8:ec:ae:22:68:d0:ad:ff:b6:63:0f:89:6f:
7d:60:f5:75:cf:7f:c8:96:90:16:b3:90:70:dc:94:41:98:e8:
62:70:94:45:09:be:7f:9e:ce:68:6d:59:46:63:98:34:26:d9:
a5:51:93:c6:31:4d:fc:28:14:04:d6:5f:62:e6:4c:a7:e7:8c:
1e:a9:b3:55:af:7c:73:65:cd:96:9b:1f:9a:f5:a1:c7:0a:be:
8f:d0:86:16:42:36:1b:f3:8a:9e:a7:71:54:00:49:ca:22:61:
40:88:ce:bd:b3:a7:1e:8c:9e:40:43:eb:3a:64:b7:11:93:df:
61:04:ec:d0:f7:5a:de:06:54:c2:11:86:ea:06:f0:9e:32:12:
cb:08:44:cc:66:f8:b3:ed:6f:6c:99:8b:4b:ec:8a:a6:15:41:
f1:0d:fc:9f:93:72:cd:6c:d7:60:02:49:86:49:52:59:c5:bc:
4c:a3:c0:d2:66:38:e5:55:b1:e4:20:90:6e:4a:1c:72:df:e5:
a3:88:22:66:34:a9:ff:26:c2:de:ff:2f:02:26:ec:3d:81:79:
99:e6:ed:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgz5soOlqL8DKI3nGbAjneMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNDhiOTJlODA5NGQ3NzgwMjE3ZTMyNTRjNTk3MjBiYzJh
OTc2MzgwHhcNMjYwOTI3MDMwMTM3WhcNMjYwOTI4MDMwMTM3WjAzMTEwLwYDVQQD
EygxZThlY2ZlZWVkYjcyNDIyNzY5MjYyYzhhYjBjMDI0OGNmNTdkZTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85nu+IgsHNCQ4V6T4xTL2nEyj4ZP
apx8ZGUdQFcQyGrceQvcVWnm1Jq4rFwxz9fJxOobtDhYruLJ0l3e0JGvrGOACGMW
kjKA7P3r+b9L2i922QajWpv0bwJ6iuo1yNatr1Vj8hNjMKbxIskWzLQOTs6EdwmX
7syWh54MnadZ3StZI3hsu/rzDVsIZvzybM7slQx3CiQIt06nt/W+LGhlw9LIXH4f
1WkydK4hwNtZfmt46/Th2K9jo81xwg3RRS91F5+NDGLcvySnleyCD72UD0qHeRwg
LJWTp97J2u7ry+rpkofgAdWomHsW8fgud2Wm/TiFEwFYwLLzDlcdKyn32QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6Oz+7ttyQidpJiyKsMAkjPV95/MB8GA1UdIwQY
MBaAFDxIuS6AlNd4AhfjJUxZcgvCqXY4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEVpNUxvQ1UxM2dDRi1NbFRGbHlDOEtwZGpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84NzBjMmEtMzk0Yy00NWMyLWE0MzQt
YjIxZTBmNGMwYzBhLzEvUEVpNUxvQ1UxM2dDRi1NbFRGbHlDOEtwZGpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84NzBjMmEtMzk0Yy00NWMyLWE0MzQtYjIxZTBmNGMwYzBh
LzEvUEVpNUxvQ1UxM2dDRi1NbFRGbHlDOEtwZGpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAns+PiS3+
26CyOErAVajmTYN0tJJz5Cf9n9aMICxXyeZmwtq3+YC3CqD47K4iaNCt/7ZjD4lv
fWD1dc9/yJaQFrOQcNyUQZjoYnCURQm+f57OaG1ZRmOYNCbZpVGTxjFN/CgUBNZf
YuZMp+eMHqmzVa98c2XNlpsfmvWhxwq+j9CGFkI2G/OKnqdxVABJyiJhQIjOvbOn
HoyeQEPrOmS3EZPfYQTs0Pda3gZUwhGG6gbwnjISywhEzGb4s+1vbJmLS+yKphVB
8Q38n5NyzWzXYAJJhklSWcW8TKPA0mY45VWx5CCQbkocct/lo4giZjSp/ybC3v8v
AibsPYF5mebtng==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:21:51 2026 by rpki-client